Forum Discussion

lupolder's avatar
lupolder
Icon for Bronze I rankBronze I
3 months ago

Zeek - Demonstrate Your Skills

Hi, I've done the Q1-15 and added the SHA1 Hash from Q14 to the hash-intel.txt. When i rerun the pcap with "zeek -r demonstrate.pcap", no logs for the Intel-Files will be created (no token generated...
defensive cyber
help & support
  • lupolder's avatar
    lupolder
    2 months ago

    Now i was able to solve it. I copied the zeek.local file and run it manually through console. That worked... i don't know why the standard run command didn't work 🤷‍♂️
    @ netcat: thank you!

KieranRowley's avatar
KieranRowley
Icon for Community Manager rankCommunity Manager
3 months ago

Hi lupolder - welcome to the community.

Demonstrate Labs are technically challenging labs that offer very limited information and guidance, they are supposed to be challenging and consolidate your learning from all of the other labs in the collection (in this case, the 8 labs in the Zeek Collection).

As a result, the level of detail of the hints and tips that the community are able to share here is limited.

If you haven't already, I recommend that you complete all of the labs in the collection, and if it's been a while since you did, you might want to refresh your memory.